table_create: remove constraint on non-existant table

account_map has been merged into nrens and is no longer present in the
table. Having a foreign-key constraint on this is bound to go wrong.

Signed-off-by: Henrik Austad <henrik@austad.us>
create_database: make it possible to call script from any location

Signed-off-by: Henrik Austad <henrik@austad.us>
NREN: do not query for login_account in nrens, it has been removed

Signed-off-by: Henrik Austad <henrik@austad.us>
NREN: do not echo error, feed it through error_output

Signed-off-by: Henrik Austad <henrik@austad.us>
Framework: link to attributes when map is not properly set.

When a new instance is installed (or a new NREN has been added), the
attribute-map is not set and Confusa will complain. This will give any
NREN-admin a direct link to where the map can be set, so as to make the
process less painful.

Signed-off-by: Henrik Austad <henrik@austad.us>
table_create: fix minor typo

Signed-off-by: Henrik Austad <henrik@austad.us>
tests: use https for tests as well

Signed-off-by: Henrik Austad <henrik@austad.us>
Subscriber: allow wider range of characters in idp_name

The name, not used in certificates, but as a description to the portal,
should allow for a wider range of characters. Since this is not used in
any certificates and all queries are properly wrapped using prepared
statements, this is a safe change.

Signed-off-by: Henrik Austad <henrik@austad.us>
add_subscriber: structure table to show error for invalid dn_name

Signed-off-by: Henrik Austad <henrik@austad.us>
Add Strict-Transport-Security header, default max-age = 1 y.

HTTP Strict Transport Security (HSTS) is a web security policy mechanism
whereby a web server declares that complying user agents (such as a web
browser) are to interact with it using only secure HTTP connections (i.e. HTTP
layered over TLS/SSL). HSTS is an IETF standards track protocol and is
specified in RFC 6797.

The HSTS Policy is communicated by the server to the user agent via a HTTP
response header field named "Strict-Transport-Security". HSTS Policy specifies
a period of time during which the user agent shall access the server in only
secure fashion.

Signed-off-by: Henrik Austad <henrik@austad.us>